From: Mahmud, Yasser (YMahmud@Solutions.UK.ATT.com)
Date: Thu Feb 20 2003 - 23:48:25 GMT-3
Yep, you are right in the fact that
"i can reach" statements are used for a router to tell other routers what
they can reach --- with the intent of alleviating the need for the other
routers to send explorers to find that 'reacability' info."
(but it doesn't work for netbios however it does for mac-addresses)
But what happens additionally is that the local router where exclusive
keyword is configured will implement a DLSW o/g filter and will check NBNQ
messages going out and will only allow the netbios-names
which are in the config via icanreach statements. This additional behaviour
can be disabled by using the remote keyword after the exclusive option.
Rgds,
Yasser
> -----Original Message-----
> From: OhioHondo [SMTP:ohiohondo@columbus.rr.com]
> Sent: Thursday, February 20, 2003 4:38 AM
> To: Voss, David; trust.hogo@sarcom.com; soonccie@yahoo.com;
> ccielab@groupstudy.com
> Subject: RE: DLSW: allow incoming netbios host X
>
> If you want to disallow a NetBIOS name coming into your router --- I
> agree
> with the "netbios input-access-filter" as the way to accomplish this.
>
> I believe that the This mechanism will not work for what I understand you
> are trying to
> accomplish.
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Voss, David
> Sent: Wednesday, February 19, 2003 9:32 PM
> To: 'trust.hogo@sarcom.com'; soonccie@yahoo.com; ccielab@groupstudy.com
> Subject: RE: DLSW: allow incoming netbios host X
>
>
> I would have to say it's going to be icanreach/exclusive commands, netbios
> access filters display the following when applying to ethernet interfaces.
>
> r6(config-if)#netbios input-access-filter host TESTING
> netbios interface commands only allowed on Token Ring like interfaces.
> r6(config-if)#^Z
>
> -----Original Message-----
> From: trust.hogo@sarcom.com [mailto:trust.hogo@sarcom.com]
> Sent: Wednesday, February 19, 2003 4:05 PM
> To: soonccie@yahoo.com; ccielab@groupstudy.com
> Subject: RE: DLSW: allow incoming netbios host X
>
>
> Use NetBIOS input-access-filter command on the interface taking part in
> DLSW.
>
> -----Original Message-----
> From: soon ccie [mailto:soonccie@yahoo.com]
> Sent: Wednesday, February 19, 2003 1:17 AM
> To: ccielab@groupstudy.com
> Subject: DLSW: allow incoming netbios host X
>
>
> Hi all,
> R1 ------DLSW--------R2.
>
> DLSW peering between R1 (lo0 1.1.1.1) and R2 (lo0 2.2.2.2). R2 can's use
> remote-peer command. The task is to let only machine with netbios name X
> to
> come in from R2.
>
> What are the possible solutions? In R1, since it is incoming netbios , so
> can't leverage remote-peer command to apply the filtering because it does
> only output filtering based on the doc. The doc lists one command that may
> be applied on R2, but I want confirmation if this is correct or if there
> is
> other ways.
>
> R2: dlsw netbios-name X remote-peer 1.1.1.1. (This cmd still use
> remote-peer
> though).
>
> TIA.
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Shopping - Send Flowers for Valentine's Day
> http://shopping.yahoo.com
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:31 GMT-3